Alexander Bokovoy via FreeIPA-users wrote:
On ti, 13 kesä 2017, Chris Dagdigian via FreeIPA-users wrote:
> Hi folks,
>
> Fixing a topology and replication issue caused my IDM infrastructure
> to forget about roughly 30 enrolled client hosts.
>
> Though this would be trivial to fix via an ansible playbook that runs
> the IPA client install command again with the "--force-join" argument.
Force join is for the case when you want ipa-join utility to repeat join
process on the server side. This just ignores the fact that host object
does exist in LDAP and allows to continue to regenerate a keytab.
It does not mean ipa-client-install would reconfigure the client side.
If you want really to re-do install, run 'ipa-client-install --uninstall
--force' and then 'ipa-client-install --force-join'.
The check for already installed client cannot be overridden right now.
Right but this is exactly the opposite of what the man page and the v3
design document states [1], hence the need for a bug.
rob
[1]
http://www.freeipa.org/page/V3/Forced_client_re-enrollment
>
> Manpage and docs suggest this should work. Any tips or help appreciated!
>
> Software:
>
> ipa-common-4.4.0-14.el7.centos.7.noarch
> ipa-client-common-4.4.0-14.el7.centos.7.noarch
> ipa-client-4.4.0-14.el7.centos.7.x86_64
>
>
> Error when I try to re-enroll the client:
>
> [root@deawilldpp06 centos]#
> [root@deawilldpp06 centos]# ipa-client-install --force-join
> --mkhomedir --unattended --password=XXXX --principal YYYY --server
>
deawilidmp001.ZZZZ.org --domain
WWWWW.org
>
> IPA client is already configured on this system.
> If you want to reinstall the IPA client, uninstall it first using
> 'ipa-client-install --uninstall'.
> [root@deawilldpp06 centos]#
> [root@deawilldpp06 centos]#
>
>
>
> _______________________________________________
> FreeIPA-users mailing list -- freeipa-users(a)lists.fedorahosted.org
> To unsubscribe send an email to
> freeipa-users-leave(a)lists.fedorahosted.org